At this point, the consumer now has a keystone token with access to roles that were requested. The keystone token will expire in the default number of days, at which point the consumer will have to get a new keystone token.